+I am currently 'playing' with apache, does anyone here ever get tired
of;
+<snip>
+[Wed Jan 30 15:30:59 2002] [error] [client 210.74.146.190] 
+File does not 
+exist: /somedir/scripts/root.exe

I discovered a simple way to prevent nimda/codered crap from cluttering
httpd logs:

Modify httpd.conf as follows:

#prevent nimda/codered probes cluttering our access_log
SetEnvIf Request_URI \cmd.exe|\root.exe|\default.ida junk

#Locate the CustomLog directive for your access_log and append env!=junk
CustomLog /var/log/httpd/access_log combined env=!junk

# prevent nimda/codered probes cluttering our error_log
# redirect to invalid URL - could also redirect to local script to
# deal with these in some other way
<IfModule mod_alias.c>
 RedirectMatch (.*)\root.exe$ http://wormhole.trash
 RedirectMatch (.*)\cmd.exe$ http://wormhole.trash
 RedirectMatch (.*)\default.ida$ http://wormhole.trash
</IfModule>

HTH
bok






Reply via email to